About “Trojan-Ransom.Win32.Gimemo.chdp” infection

The Trojan-Ransom.Win32.Gimemo.chdp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Gimemo.chdp virus can do?

• Creates RWX memory
• Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
• Reads data out of its own binary image
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Attempts to restart the guest VM
• Installs itself for autorun at Windows startup

How to determine Trojan-Ransom.Win32.Gimemo.chdp?

File Info:
crc32: 60740E92
md5: e57f5083b53976be626f8a75b1da1d45
name: E57F5083B53976BE626F8A75B1DA1D45.mlw
sha1: f006fbf8bf0e3e69f748beff314c8d0c30510057
sha256: 8ba16f6dfd374074e02235fc735292c3a55b3706ff18448c75fef6faa8955a47
sha512: 2e994ced6f5edbd1ef9bc9a4ab14f60bb278bdeabb5ffe3d26f6c9b5685ae64b13f0748465ce68a3cb0824b56db2053e5c14052f5f173305d441a4b916cd17cc
ssdeep: 6144:Q3m5IT0N1zmYizcavcKIz04me3VhtqDTsLDPh6ebjb+XUoGnLcmEZiTn3WbqD5:4m5ITwpmi0IZqDwPh6OmE9nLcmMmWbo
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
0: [No Data]

Trojan-Ransom.Win32.Gimemo.chdp also known as:

How to remove Trojan-Ransom.Win32.Gimemo.chdp?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.